I am using Cymulate for BAS assessment, and I appreciate its ability to find loopholes or security gaps, allowing me to mitigate them. I like the assessment coverage area and that I can do WAF assessment, hopper assessment, endpoint assessment, and email gateway assessment. Cymulate covers all aspects I need, and setting it up is easy thanks to the agent-based setup and provided guide. I find it the best product in BAS, and I am likely to recommend it highly. Review collected by and hosted on G2.com.

I feel that AI-related assessments should be added more. Review collected by and hosted on G2.com.

What I value most is its ability to provide realistic, continuous validation of our security posture without disrupting production systems. It’s efficient and intuitive to use, which makes it easy for us to run tests regularly and incorporate them into our ongoing continuous security validation process. Review collected by and hosted on G2.com.

Sometimes it’s difficult to get Cymulate working smoothly because of our company’s internal policies and restrictions. Review collected by and hosted on G2.com.

Email and endpoint attacks are customizable—scenario-based. There are lots of types of attacks in the attack database. The attack scenarios occur on a fast-paced SaaS platform. Mitigation strategies are also described in great detail and are easy to understand. Review collected by and hosted on G2.com.

Not too much - reporting system is a bit awkward. Not so much detailed. Lots of modules that needs to be considered before buying. Good integration options but needs to be bought seperately. Review collected by and hosted on G2.com.

Cymulate helped us fine-tune and optimize our SOC & SIEM, stay ahead of threats, and build resilient operations through its exceptional continuous validation. It also helps us easily detect configuration drifts in ever-changing infrastructure environments, which I find crucial and it is a true blessing for a security manager. With the advanced visibility and clear proof of ROI, it provides the exact justification we need to present to the board. Review collected by and hosted on G2.com.

I had no problems or difficulties using the product. Review collected by and hosted on G2.com.

It is great tool to assess our security tools, gives real-time view, we can automate the assessments, with BAS 2.0 now, we can run more scenarios to validate security of the tools Review collected by and hosted on G2.com.

Overall, the product is great, but sometimes support team little slower in providing the resolution Review collected by and hosted on G2.com.

The simulations are very realistic and easy to execute, allowing for quick evaluation of different attack vectors.

The platform offers clear reports with remediation priorities, facilitating decision-making.

Its continuous approach helps improve security posture without disrupting operations. Review collected by and hosted on G2.com.

The initial learning curve can be moderate if there is no prior experience with BAS.

Some advanced simulations require technical adjustments or additional licenses.

The reports in Spanish could be more comprehensive. It should be possible to create dashboards with more representative KPIs. Review collected by and hosted on G2.com.

I like best about Cymulate is its intuitive and user-friendly interface, which makes it easy to set up and manage continuous security validation across our environment. The platform provides comprehensive attack simulations that help identify vulnerabilities before attackers can exploit them. I also appreciate the actionable insights and remediation guidance that allow our team to prioritize and address critical risks quickly. The real-time reporting and variety of testing modules—from phishing simulations to lateral movement—make Cymulate a valuable tool for strengthening our organization’s security posture. Review collected by and hosted on G2.com.

I dislike about Cymulate is that some advanced features can be a bit complex to configure, and initial setup may take more time if you are new to the platform. Sometimes, reports can contain a lot of details, which may feel overwhelming for beginners. Review collected by and hosted on G2.com.

It provides automated, continuous security validation that clearly shows real-world attack exposure and the steps needed for remediation. Review collected by and hosted on G2.com.

Limited customization options and occasional false positives can make it challenging to fine-tune the results. Review collected by and hosted on G2.com.

I love how Cymulate turns continuous, safe attack simulations into actionable, MITRE-mapped fixes with one-click retesting. It centralizes App/Email/Web/EDR/WAF/ASM validation, integrates with our stack, and gives exec-ready reporting to prove risk reduction month over month. Review collected by and hosted on G2.com.

Exec PDFs are clean but layout/branding and metric granularity (per control/subcontrol trends) feel constrained. Review collected by and hosted on G2.com.

1) Variety of comprehensive security assessments and detailed reports that provide mitigation guidance across multiple security vectors.

2) excellent customer support

3) Easy deployment Review collected by and hosted on G2.com.

1) The dashboard customization and reporting system could be improved, as the overall score is calculated as an average of all assessments conducted since day one, potentially limiting more granular insights.

2) The customer support team should adopt a more proactive approach, as reported issues often take over a month to be resolved. Review collected by and hosted on G2.com.